Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

The Tines Voice of Security 2026 report found that security professionals spend 44% of their time on manual, repetitive work. A workflow engine is the software built to take that operational drag off people, deciding what happens next based on events, rules, and state. The category is shifting. The workflow engine used to live inside one system, running a narrow set of backend steps.

When a security alert fires, your analyst opens your security information and event management (SIEM) platform, copies an IP address, pastes it into a threat intelligence platform, checks the asset inventory, cross-references the identity provider, and messages the on-call lead on Slack. Meaning your analyst needs to wade through five tools, taking at least ten minutes before any actual response begins.

Most teams adopting AI in their workflows understand that LLMs do not behave like traditional software. The same input does not always produce the same output, and even when it does, the model can be wrong, manipulated, or misled. Hallucinations happen even without adversarial input. Air Canada learned this in 2024 when a tribunal ordered the airline to honor a bereavement-fare refund policy its support chatbot had invented out of thin air.

It was a bold move, but our finance team was fully on board. They both approved and championed the approach. They wanted to see exactly how much value we could unlock for our customers. They didn't look at the resulting bill and ask us to slow down.

Today, we’re proud to share that Tines has achieved ISO 27001, ISO 27701, and ISO 42001 certification. This marks an important milestone in how we continue to effectively manage information security, privacy, and AI governance across our business and platform. For you, this is about more than achieving the ISO trifecta.

IT Service Management platforms like ServiceNow and Jira Service Management have fundamentally shaped how modern IT organizations operate. They bring structure to incident response, discipline to change management, and consistency to request fulfillment. For many enterprises, ITSM is the operational backbone that keeps digital services reliable, governed, and accountable.

Security operations often feel like a paradox: a discipline built on high-speed decision-making wrapped inside layers of noisy, inconsistent data. Every alert has some useful and not so useful noise, but only a few truly matter. Our job is to know the difference. For us, Tines became the medium through which the noise resolved into signal.

Have you submitted your YDWWT workflow yet? Submissions close April 14th. We’ll be giving away an exclusive Workflow Workshop LEGO set to one lucky entrant. NOTE: everyone who enters YDWWT is eligible to win this prize, winner will be selected at random. Enter now.

For managed security service providers (MSSPs), alert fatigue doesn’t just burn out your analysts: it’s a real risk to your business. From the financial costs of missed SLAs and security incidents to the customer trust lost when critical alerts are overlooked, alert fatigue negatively impacts customer outcomes, client retention, and your profitability.

For managed security service providers (MSSPs), customer loyalty is the most critical indicator of business health. Unlike other metrics that you directly control, such as mean time to respond or mean time to detect, it can’t be gamed: customers will either stay with you or they’ll churn. This means that the top priority for any MSSP should be to deliver the specific customer outcomes they were hired to provide, like helping to stop threat actors before they cause damage.